fix(haproxy): set X-CLIENT-IP instead of adding it #11

Merged
jknapp merged 2 commits from fix/x-client-ip-set-not-add into main 2026-09-18 23:33:05 +00:00
2 Commits
Author SHA1 Message Date
shadowdaoandClaude Sonnet 5 cc2cfd82a2 chore: bump VERSION to 2026.09.1
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-18 16:32:53 -07:00
shadowdaoandClaude Sonnet 5 ab3ad42625 fix(haproxy): set X-CLIENT-IP instead of adding it
add-header let a client-supplied X-CLIENT-IP survive next to ours, so a
backend reading the first occurrence got the attacker's value. set-header
replaces any inbound copy. Refs #10.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-18 16:32:49 -07:00